1. A method of reconstructing a voice call session, the method comprising: 
identifying a voice call prepaid account associated with a user; 
receiving a plurality of packets over a network interface, the packets being 
\^ representative of a voice call over a network; 
filtering the received packets; 

analyzing the filtered plurality of packets to identify at least a first flow; 
identifying an application for the at least a first flow; 
selecting a corresponding application flow identifier for the application; 
using the corresponding application flow identifier to identify a plurality of flows 
in the plurality of packets corresponding to the session; 

altering accounting operations based on a type of the identified application; 
charging for the voice call against the voice call prepaid account; and 
terminating access to voice calls by the user if the voice call prepaid account is 
exceeded. 



10. A system for reconstructing a voice call session, the system comprising: 

a packet source, the packet source generating a plurality of packets, wherein the 
packets are filtered and are representative of a voice call over a network; 
^ a flow manager coupled to the packet source, the flow manager identifying at least 

one flow in the plurality of packets; 

an application recognizer coupled to the flow manager, the application recognizer 
identifying an application corresponding to the at least one flow; 

a session streamer coupled to the flow manager, the session streamer identifying a 
plurality of flows in the plurality of packets corresponding to the session based on the 
application; 

wherein a voice call prepaid account associated with a user is identified, 
accounting operations are altered based on a type of the identified application, the voice 
call is charged for against the voice call prepaid account, and access to voice calls by the 
user is terminated if the voice call prepaid account is exceeded. 
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11. The system of claim 10, wherein each of the plurality of packets includes a 
plurality of header elements and the at least one flow includes one or more packets with a 




common packet header element. 



13. The system of claim 10, wherein the application recognizer signals to the 
session streamer to treat the at least one flow as a session when the application recognizer 
cannot identify an application for the at least one flow. 



15. An apparatus for reconstructing a voice call session, the apparatus 
comprising: 

means for identifying a voice call prepaid account associated with a user; 
means for receiving a plurality of packets, the packets being representative of a 
voice call over a network; 

means for filtering the received packets; 

means for identifying at least a first flow in the plurality of packets; 

means for identifying an application for the at least a first flow; 

means for selecting a corresponding application flow identifier for the application; 

means for identifying a plurality of flows in the plurality of packets corresponding 
to the session using the corresponding application flow identifier; 

means for altering accounting operations based on a type of the identified 
application; 

means for charging for the voice call against the voice call prepaid account; and 
means for terminating access to voice calls by the user if the voice call prepaid 
account is exceeded. 



fyl 19. A computer data signal embodied in a carrier wave comprising: 

C\jf a computer program for session reconstruction: 

^ a first set of instructions for identifying at least one flow in a plurality of 

packets; 
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a second set of instructions for analyzing the at least one flow to identify 
an application corresponding to the flow; and 

a third set of instructions for identifying a plurality of flows in the plurality 
of packets corresponding to the session based on the application; 

wherein a voice call prepaid account associated with a user is identified, 
accounting operations are altered based on a type of the identified application, the 
voice call is charged for against the voice call prepaid account, and access to voice 
calls by the user is terminated if the voice call prepaid account is exceeded. 
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